Privacy Policy

Last updated: 9 November 2026

This policy explains what personal data CheckoutCurve collects, why, who we share it with and what you can ask us to do with it. We've written it in plain English. If anything is unclear, email [email protected].

1. Who we are

CheckoutCurve is run by Sk Sabbir Uddin and Kulsum Akter, based in Malaysia. We are responsible for the personal data described here. Contact us at [email protected].

2. What we collect

When you fill in a form on this site: your name, email address, store URL, platform, how many products you sell, what you need, your message, and, if you add one, a link to an existing audit. The teardown form asks how you heard about us too.

When you email us or book a call: what you send us, and your name, email address and the time you choose.

When you work with us: to audit or work on your store, we ask for access to Google Search Console, Google Analytics, a staff account on your store and, if ads are in scope, read-only access to your ad accounts. Through these we see your store's traffic, orders and sales figures. We use them only to do the work you hired us for.

When you visit this site: we use Cloudflare Web Analytics to count visits. It doesn't use cookies and doesn't identify you. It records things like which pages were viewed, the website you came from, your country and device type. Our host, Cloudflare, processes your IP address to deliver the site and protect it from attacks.

3. Cookies

This site doesn't set cookies for tracking or advertising, so there's no cookie banner. Videos on this site load from YouTube only when you press play, using YouTube's privacy-enhanced mode. Once it plays, Google's privacy policy applies to that video. If you book a call, we send you a Calendly link. Calendly's booking page opens on its own site, and Calendly's privacy policy applies there.

If we ever add tools that use cookies, we'll ask for your consent first and update this page.

4. Why we use your data

  • To reply to your enquiry and send a quote.
  • To deliver audits, fixes and monthly SEO work you've agreed to.
  • To send invoices and keep the business records the law requires.
  • To keep this site working and secure.
  • To contact businesses about our services, using contact details they publish. You can ask us to stop at any time and we will.

If you're in the UK or the European Union, our legal bases are: taking steps at your request before a contract, performing our contract with you, our legitimate interest in running and promoting our business, and our legal obligations.

5. Who we share it with

We never sell your data. We share it only with the services we use to run CheckoutCurve:

  • Formspree, which receives what you submit through our forms and emails it to us.
  • Cloudflare, which hosts this site and provides our visit counts.
  • Google (Gmail), which handles our email.
  • Calendly, if you book a call.
  • The payment service named on your invoice, when you pay us.
  • Our developer, only when your project needs theme or code changes, and only the access that work needs.

We show client results, names or reviews on this site only with written permission.

6. Where your data goes

We're based in Malaysia, and some of the services above store data in the European Union or the United States. When data leaves your country, we use services that protect it with the safeguards the law requires, such as standard contractual clauses.

7. How long we keep it

  • Enquiries that don't become work: deleted after 12 months.
  • Client records and invoices: kept for 7 years, as business and tax law requires.
  • Access to your store and accounts: when our work ends, we ask you to remove our access, and we delete any files exported from your store within 90 days.

8. Your rights

You can ask us to:

  • show you the personal data we hold about you
  • correct it
  • delete it
  • stop using it for a purpose you object to, including contacting you
  • withdraw consent you've given

Email [email protected]. We'll reply within 21 days. If you're unhappy with how we handle your data, you can complain to your data protection authority: in Malaysia the Personal Data Protection Commissioner, in the UK the Information Commissioner's Office, or in the European Union your local data protection authority.

9. How we protect it

Only Sabbir, Kulsum and, where a project needs it, our developer can see client data. We use strong passwords and two-step login on the accounts that hold it.

10. Children

This site and our services are for businesses. We don't knowingly collect data from anyone under 18.

11. Changes to this policy

If we change this policy, we'll update the date at the top of this page.